Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: dKY+HrYajkfnk5iPDPf7qW3T7ZUXcZQVPGBgb4zNOHU=
Subject key identifier: CF:47:CE:2E:21:A2:0E:8E:99:63:C1:BD:0A:E9:D9:BA:97:98:FF:A5
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019EBB4693E43FCAB209974989CEAD6F250A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 1040
Signing time: Fri 12 Jun 2026 10:00:25 +0000
Manifest this update: Fri 12 Jun 2026 10:00:25 +0000
Manifest next update: Sat 13 Jun 2026 10:00:25 +0000
Files and hashes: 1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: tKvIhIKfwHQXeensgJV/lRtrCEeA/g8mm4fRUiXbBBM=)
3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:46:93:e4:3f:ca:b2:09:97:49:89:ce:ad:6f:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jun 12 10:00:25 2026 GMT
Not After : Jun 13 10:00:25 2026 GMT
Subject: CN=cf47ce2e21a20e8e9963c1bd0ae9d9ba9798ffa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:4b:05:08:e9:69:44:4a:6b:c4:4f:b6:fa:
09:56:05:6e:29:85:a6:ac:e8:91:09:90:63:72:0c:
2e:62:7e:a8:bd:40:ff:78:57:11:30:26:5f:93:a7:
88:f3:45:c2:3e:35:41:b0:06:c2:bb:f9:b9:4b:5a:
a5:e6:7e:ba:38:5f:df:83:5b:90:9e:8a:7b:78:66:
3f:c2:38:92:6d:73:cc:64:b9:71:54:d4:77:95:c2:
a8:34:2f:00:ed:3f:f8:18:4b:86:1a:77:06:90:df:
bb:d2:89:d9:3c:6f:1a:08:00:2f:95:da:b4:84:89:
0c:09:17:6a:51:a5:e7:f2:56:88:b7:c8:88:55:da:
ca:20:e2:da:52:56:e2:cf:cd:6b:32:5b:ea:21:9b:
c7:7e:2b:e8:c4:ce:f1:20:2c:67:9f:34:8f:c6:53:
b0:91:d2:b2:ac:f0:2a:ff:06:c4:43:1f:5d:55:19:
01:85:ad:85:57:16:58:b4:36:b1:db:68:89:ef:77:
c6:0c:5b:d8:c1:43:2f:e0:57:f8:b4:87:28:46:30:
a6:6f:84:96:2c:63:7c:f7:f4:6d:bb:39:2e:5e:34:
3d:4c:3b:f4:de:1b:54:ae:c3:20:44:f0:30:d2:6b:
e6:26:03:55:66:af:74:7a:cf:04:ab:1d:d1:94:33:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:47:CE:2E:21:A2:0E:8E:99:63:C1:BD:0A:E9:D9:BA:97:98:FF:A5
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2c:88:57:3d:dc:d3:de:ec:66:6e:df:20:70:ea:25:8d:df:
d2:f1:8e:13:40:71:0d:5b:fd:16:3e:ad:98:5e:e5:b2:b1:71:
a9:bd:01:66:b7:42:f2:5c:5b:76:3f:10:7d:01:0d:6b:a3:84:
b8:c2:cd:e6:f3:79:26:93:3c:f6:d4:85:cd:c0:f1:51:42:b1:
72:3f:71:27:0f:7f:07:56:05:4f:cb:d0:89:b1:fa:93:fa:4b:
52:a1:e8:76:91:80:27:4d:fb:10:ac:19:fe:2a:41:69:64:f8:
f1:df:2c:7a:b2:eb:2b:7e:28:fb:4e:83:59:07:5f:63:13:0f:
de:69:ef:6a:9f:49:37:93:79:ba:8d:3d:42:8c:4a:47:b4:c1:
1f:f3:e0:11:4e:93:ce:df:39:b5:55:cc:4f:21:ac:f2:bc:1b:
e0:9b:68:8d:8a:8b:34:80:9e:17:85:b6:f8:db:21:d4:ba:d4:
0f:ba:fb:c2:3a:42:c9:2c:b0:22:e0:f1:6b:a5:bb:3c:14:4e:
c3:88:7c:ae:43:8c:db:40:69:fe:53:71:30:73:b8:a8:3c:e1:
b4:bf:22:3c:9c:fc:6b:87:36:64:d4:8e:7c:ac:df:07:dd:05:
e5:01:17:05:5c:70:d0:05:77:2b:6e:5a:0e:28:14:b3:6f:72:
91:06:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:23:36 2026 by rpki-client